Your Privacy, Handled the Way We Handle Security.
We collect only what we need, protect it with the same discipline we bring to client engagements, and never sell it. This policy explains exactly what we do with your data and the rights you have over it.
PRIVACY AT A GLANCE
The short version, before the details.
We never sell your data
Your personal information is never sold, rented, or traded to anyone.
You stay in control
Access, correct, export, or delete the data we hold whenever you ask.
Encrypted and access controlled
Data is encrypted in transit and at rest, with access limited to trained staff.
PIPEDA and GDPR aligned
Our practices follow Canadian (PIPEDA) and EU (GDPR) privacy standards.
Information we collect
We only collect the information we need to run our services and support you. Depending on how you interact with us, that may include:
- Contact details you provide, such as your name, email, phone number, and company name
- Technical data collected automatically, such as IP address, device type, and browser information
- Usage data about how you navigate and interact with our website
We do not collect sensitive personal information unless you actively choose to share it with us.
How we use your information
We use your data to deliver a secure and useful experience. Specifically, we use it to:
- Create and manage your account
- Respond to your enquiries and support requests
- Send important service updates and security notices
- Improve our services, tools, and website
- Detect, prevent, and respond to security threats
- Meet our legal and regulatory obligations
We only use your information for the purposes described in this policy.
How we protect your data
As a cybersecurity company, protecting data is our core discipline. We apply:
- Encryption of data in transit and at rest
- Hardened, access controlled servers and firewalls
- Strict internal security standards and least privilege access
- Regular review of our own systems and processes
Access to personal data is limited to trained staff who need it to do their work.
How long we keep your data
We retain personal data only for as long as it is needed for the purpose it was collected, or as required by law. When it is no longer needed, we securely delete it. You can request deletion of your data at any time.
Data storage and international transfers
Your data is stored on secure servers within trusted data centres. Depending on your location and the services you use, some data may be processed or stored outside your country. Wherever your data is handled, we apply the same security standards and comply with applicable data protection laws.
Your privacy rights
You have meaningful control over your personal information. Subject to applicable law, you can:
- Ask what personal data we hold about you
- Request corrections to inaccurate information
- Request deletion of your data
- Restrict or object to how we use your information
- Withdraw consent you previously gave
- Request a copy of your data in a portable format
To exercise any of these rights, contact our privacy team. We respond promptly and clearly.
Third party links
Our website may link to other sites we do not control. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any third party site before sharing personal information.
Children's privacy
Our services are not directed to children under 13, and we do not knowingly collect their personal data. If we learn that we have, we will delete it promptly. If you believe a child has shared information with us, please contact us right away.
Changes to this policy
We may update this policy as our services and legal obligations evolve. When we make changes, we update the effective date at the top of this page, and we will notify you before significant changes take effect. Continuing to use our services means you accept the current version of this policy.
Contact us
If you have questions about this Privacy Policy or how we handle your data, our privacy team is here to help.
PlutoSec Privacy Team